Program Details

~~ A quick overview of CHICAGO Metrics™ ~~

CHICAGO Metrics™ Tracking Spreadsheet

Our flagship product, which takes any number of tactical metrics, for conversations with engineers, and aggregates them into 6 key business/risk indicators, for conversations with executives, complete with CHICAGO Score™. It provides Risk and Effort indicators to provide prioritization direction. The tracking sheet also includes an A3 display tool, the CHICAGO Metrics™ Run Chart, and a Risk Register.

CHICAGO Maturity Model

Most maturity models use five general levels with vague descriptions. This leaves organizations to guess where they fall. Usually giving themselves an extra "half a level". The CHICAGO Maturity Model gives a definitive quantitative scoring model to determine your organization's maturity level.

A3 Reporting Template

The A3 reporting template is formatted for A3 paper (11x17) to display your prioritized risk items, your CHICAGO Score™, your CHICAGO Maturity Model Level, and your CHICAGO Run Charts. A simple tool show where you have been and where you are going.

Magic Quadrant Visual Display Chart

The Magic Quadrant Display chart is a tool to show your leadership how well your tools (technology) are working and what it will take to improve their performance. Perhaps that is increased staff or something as simple as training.

IT and InfoSec Policies

Our complete set of policies is aligned with NIST and HIPAA can help you manage your department without needing to spend weeks or months developing them. Here is a sample.

Threat Heat Map Tool

Display the threats to your environment is a quick and easy to read format. Two formats are provided: Attacker and Method. Attacker is broken down into Capability and Likelihood. Method is broken down into Impact and Likelihood.

ROI Calculator

Use this tool to calculate the ROI of a new tool or service. This tool calculates the NPV, IRR, and Payback Period for the proposed tool or service. This tool takes into account the industry served and company size to determine incident/breach likelihood. The industry and company size is also used to determine costs in the event of record losses.